Weaknesses of type CWE-36

144 results

Travessia de diretório via caminho absoluto

A aplicação constrói caminhos de arquivo usando entrada externa, mas não valida adequadamente caminhos absolutos (como /etc/passwd ou C:\Windows\System32). Um atacante pode fornecer um caminho completo que ignora completamente a restrição de diretório pretendida, acessando arquivos fora da pasta permitida.

Example

Um serviço web que baixa arquivos do diretório /uploads/user123/ recebe a entrada do usuário para nome do arquivo. Se o usuário envia '/etc/passwd' em vez de apenas 'documento.pdf', o sistema tenta ler /etc/passwd, não /uploads/user123/etc/passwd, expondo dados sensíveis.

How to mitigate

Valide e normalize toda entrada de caminho (remova .., barras iniciais, e sequências de escape), use uma lista de permissão de caracteres seguros, e canonicalize o caminho final antes de acessar o arquivo para garantir que está realmente dentro do diretório esperado. Alternativa robusta: use IDs ou índices em vez de nomes de arquivo fornecidos pelo usuário.

CVE-2024-8497HIGHFranklin Fueling Systems TS-550 EVO Absolute Path TraversalEPSS 0.6%CVE-2025-8912HIGHWellChoose｜Organization Portal System - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2026-44029MEDIUMAn issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-fiEPSS 0.6%CVE-2023-5390MEDIUMAn attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion ControlEdge VirtualUOC andEPSS 0.6%CVE-2025-0001MEDIUMauthenticated arbitrary file read vulnerabilityEPSS 0.6%CVE-2026-6418MEDIUMPaperCut NG/MF: Path Traversal in Shared Account SynchronizationEPSS 0.6%CVE-2025-9258HIGHUniong｜WebITR - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2025-9257HIGHUniong｜WebITR - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2025-9259HIGHUniong｜WebITR - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2025-9256HIGHUniong｜WebITR - Arbitrary File Reading through Path TraversalEPSS 0.6%CVE-2024-56321LOWGoCD can allow malicious GoCD admins to abuse backup configuration to gain additional host accessEPSS 0.5%CVE-2023-30970MEDIUMGotham table and Forward App Path traversalEPSS 0.5%CVE-2026-82092HIGHDataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareEPSS 0.5%CVE-2026-13189HIGHSpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.5%CVE-2024-51549CRITICALAbsolute Path TraversalEPSS 0.5%CVE-2025-15227HIGHWELLTEND TECHNOLOGY｜ BPMFlowWebkit - Arbitrary File ReadEPSS 0.5%CVE-2026-32997HIGHA vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & RepEPSS 0.5%CVE-2024-6097MEDIUMAbsolute Path Traversal VulnerabilityEPSS 0.5%CVE-2025-8213HIGHNinjaScanner – Virus & Malware scan <= 3.2.5 - Authenticated (Administrator+) Arbitrary File DeletionEPSS 0.5%CVE-2026-47606MEDIUMNVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful expEPSS 0.5%